Metasploit Framework 6.4 is out now! 🆕🎉
Features include:
🔹More Kerberos goodness, like support for diamond and sapphire tickets and extract tickets from compromised windows hosts to leverage unconstrained delegation
🔹DNS configuration 1/4
Rapid7 has released a full exploit chain for #MOVEit Transfer CVE-2023-34362. The write-up we've published in AttackerKB contains more than 30 pages of analysis and code — huge shout-out to @iagox86, @stephenfewer, and @_CField for their work on this. https://t.co/ceIrEkVeUw
There's so much good stuff out this week 😱 ! DirtyCow on macOS, support for Ruby 3.2, and we've added colors to the Metasploit console snippets on the docsite. Plus more than a dozen other things! https://t.co/nDNdT2IWE3
Metasploit Framework 6.3 is out now🎉
New features include native Kerberos authentication support, streamlined Active Directory attack workflows (AD CS, AD DS), and new modules that request, forge, and convert tickets between formats. https://t.co/Ucwrtmzt9W
New getsystem technique for Windows Meterpreter now in MSF thanks to @_smashery_ . All in memory, no services started, based on @itm4n's PrintSpoofer work. Full details in this week's wrap-up from @DeanAsInSean. https://t.co/8ysi12n0eV
Announcing the 2021 Metasploit community CTF: Registration opens Nov. 22, game play begins Dec. 3. Teams welcome and encouraged as always— thanks to @tryhackme and @ctfdio for supporting this year's game.
https://t.co/Tr28nAt01a
Into open source, offensive security, and product strategy? I'm hiring a technical product manager for Metasploit Framework. Work on a highly visible OSS product alongside a great team of global researchers and engineers! Remote U.S. or office locations 👇 https://t.co/Zu2w2MO2vQ
Weekly wrap-up by @DeanAsInSean: Metasploit's first modules for targeting Kubernetes clusters (enumeration + authenticated RCE), plus Windows support for exploiting Confluence Server CVE-2021-26084. https://t.co/rXmVz3dtTV
We've posted our weekly #Metasploit wrap-up, courtesy of @DeanAsInSean! Covers a new Microsoft Windows Spooler privesc module, along with some good fixes and improvements. Catch all the deets here: https://t.co/mGjbQdpzfv
The Metasploit Framework is an open source tool for testing and demonstrating security vulnerabilities within software. Explore it in-depth at #GitHubUniverse with @zeroSteiner. https://t.co/zomRrkJM6Y
Team registration for the end-of-year #MetasploitCTF opens *tomorrow* at 11 AM U.S. Central Time (UTC - 6). Only one team member needs to create a new team—other players can join later, and there's no cap on team size. Good luck! 😎🃏https://t.co/IaAjP9Kifc